CVE

Id
21488  
CVE No.
CVE-2006-5384  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter.  
Phase
Assigned (20061018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205039 21488 CVE-2006-5384 MILW0RM:2540  View
205040 21488 CVE-2006-5384 URL:http://milw0rm.com/exploits/2540  View
205041 21488 CVE-2006-5384 BID:20508  View
205042 21488 CVE-2006-5384 URL:http://www.securityfocus.com/bid/20508  View
205043 21488 CVE-2006-5384 VUPEN:ADV-2006-4048  View
205044 21488 CVE-2006-5384 URL:http://www.vupen.com/english/advisories/2006/4048  View
205045 21488 CVE-2006-5384 SECUNIA:22416  View
205046 21488 CVE-2006-5384 URL:http://secunia.com/advisories/22416  View
205047 21488 CVE-2006-5384 XF:cdsagenda-send-file-include(29519)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60016 JVNDB-2006-002282 NuralStorm Webmail の process.php における PHP リモートファイルインクルージョンの脆弱性 NuralStorm Webmail の process.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5386 21488 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002282.html  View